$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2cf86ff7-281b-3317-934a-1989a3943f3b.roa File: 2cf86ff7-281b-3317-934a-1989a3943f3b.roa (raw, json) Hash identifier: fcmpmmylX482jDOgg3/IfIsF4daeaVYIdRBWp97J18A= Subject key identifier: 17:5B:35:31:47:EE:4E:A0:6A:55:D2:71:4C:18:EB:76:D9:3C:CA:8B Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849EEB509FFF2BA31A610BA1A40 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2cf86ff7-281b-3317-934a-1989a3943f3b.roa Signing time: Thu 22 May 2025 01:00:51 +0000 ROA not before: Thu 22 May 2025 01:00:51 +0000 ROA not after: Wed 20 Aug 2025 01:00:51 +0000 asID: 13335 IP address blocks: 172.70.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ee:b5:09:ff:f2:ba:31:a6:10:ba:1a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 22 01:00:51 2025 GMT Not After : Aug 20 01:00:51 2025 GMT Subject: CN=93ce1151-891b-4985-8c20-9f6672a2f1b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:7f:fc:5d:3d:d0:f1:01:17:9a:51:ac:79:20: 1b:97:2c:f7:b2:fb:c7:00:a8:29:39:5c:03:17:8b: e0:65:73:88:93:69:16:65:9a:14:ee:37:48:6f:b2: 03:d7:01:c2:57:55:e2:8b:ea:02:d4:9c:98:11:00: 1f:e3:19:21:0a:8d:84:52:94:eb:78:bf:84:35:49: e7:5c:f6:91:65:bc:25:7e:47:d4:0e:fa:48:ed:3c: 56:bf:17:5f:92:88:2a:1b:b9:93:de:2b:e0:e8:9c: 63:d5:a1:7c:28:7f:53:e6:f7:ac:08:92:b0:c4:81: 2a:e0:b3:27:66:57:ec:1c:e3:37:b4:d9:bd:22:53: 87:78:a7:71:66:6a:67:7e:97:3c:ce:cc:11:df:41: 94:7b:60:e3:b2:1d:d2:c3:a7:e9:cf:79:e8:5b:76: d3:3c:46:fd:46:a4:98:39:e8:cf:4e:8c:65:9b:1a: d9:eb:26:a1:ef:f5:92:4f:1b:50:44:f5:84:31:1a: 1c:ce:29:c7:07:88:e7:c8:2e:14:4b:e3:28:86:ad: f9:a9:d3:c1:7b:3b:77:bc:c6:7c:97:ac:a1:2b:6a: c2:8c:c2:1d:70:9c:1f:aa:82:b2:47:41:f3:7a:f8: e4:f4:b7:fc:92:f5:5f:94:10:61:88:32:ef:04:69: 2b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:5B:35:31:47:EE:4E:A0:6A:55:D2:71:4C:18:EB:76:D9:3C:CA:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2cf86ff7-281b-3317-934a-1989a3943f3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:a5:56:c4:28:64:9a:a5:ba:c8:0a:53:17:ea:8a:27:6b:46: 62:de:5e:88:51:1f:86:4f:62:d6:d6:d5:a6:f5:15:f6:84:d1: d4:75:be:4e:45:07:9c:f4:44:1f:a6:dc:23:be:0e:41:74:32: 72:1c:93:b0:10:53:b4:0a:a4:c6:c6:67:27:ee:c1:2b:09:74: bc:a7:97:5f:da:9d:4a:13:51:12:53:38:b9:c4:22:ca:c1:aa: 36:1f:c3:37:d3:7d:9f:7f:b6:bf:4e:72:d4:a2:a9:66:c0:53: fa:c8:8b:80:3b:80:08:16:45:f6:d5:d4:50:cd:bc:7d:df:0c: dd:b1:2e:9b:51:81:4c:ff:ef:c5:09:06:b4:ca:21:70:be:6a: 40:e7:3c:5e:f4:22:e2:b1:71:67:1d:89:ac:be:2d:62:2f:37: 87:a0:d9:e8:42:97:e9:7d:21:90:63:02:e0:4a:b1:22:23:d1: 4e:c3:77:29:5f:d4:80:d9:a1:5e:27:d4:91:d9:81:01:ec:80: 40:69:27:bd:a2:7e:c9:d0:1a:36:fd:d2:6b:e9:c3:9e:dd:21: c5:1e:85:0a:fb:eb:fb:8d:7e:29:44:bc:88:5b:8d:15:26:5d: 8c:85:bc:17:aa:c6:7d:66:89:61:91:35:75:98:99:e8:2c:84: 29:e4:ab:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnutQn/8roxphC6GkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMjAxMDA1MVoXDTI1MDgyMDAxMDA1MVowLzEtMCsGA1UEAxMk OTNjZTExNTEtODkxYi00OTg1LThjMjAtOWY2NjcyYTJmMWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1X/8XT3Q8QEXmlGseSAblyz3svvHAKgpOVwD F4vgZXOIk2kWZZoU7jdIb7ID1wHCV1Xii+oC1JyYEQAf4xkhCo2EUpTreL+ENUnn XPaRZbwlfkfUDvpI7TxWvxdfkogqG7mT3ivg6Jxj1aF8KH9T5vesCJKwxIEq4LMn ZlfsHOM3tNm9IlOHeKdxZmpnfpc8zswR30GUe2Djsh3Sw6fpz3noW3bTPEb9RqSY OejPToxlmxrZ6yah7/WSTxtQRPWEMRoczinHB4jnyC4US+Mohq35qdPBezt3vMZ8 l6yhK2rCjMIdcJwfqoKyR0Hzevjk9Lf8kvVflBBhiDLvBGkrkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBdbNTFH7k6galXScUwY63bZPMqLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMmNmODZmZjctMjgxYi0z MzE3LTkzNGEtMTk4OWEzOTQzZjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEYxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACilVsQoZJqlusgKUxfqiidrRmLeXohRH4ZPYtbW1ab1FfaE0dR1vk5F B5z0RB+m3CO+DkF0MnIck7AQU7QKpMbGZyfuwSsJdLynl1/anUoTURJTOLnEIsrB qjYfwzfTfZ9/tr9OctSiqWbAU/rIi4A7gAgWRfbV1FDNvH3fDN2xLptRgUz/78UJ BrTKIXC+akDnPF70IuKxcWcdiay+LWIvN4eg2ehCl+l9IZBjAuBKsSIj0U7Ddylf 1IDZoV4n1JHZgQHsgEBpJ72ifsnQGjb90mvpw57dIcUehQr76/uNfilEvIhbjRUm XYyFvBeqxn1miWGRNXWYmegshCnkq9k= -----END CERTIFICATE-----Generated at Sat Jun 7 12:25:18 2025 by rpki-client